SIEM Content & Detection Engineer

DirectViz Solutions, LLC; Columbus (OH); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive medical benefits

401(k) match

Generous PTO accrual

Professional development reimbursement

Tech certifications

Employee recognition programs

Job summary

DirectViz Solutions, LLC in Columbus, OH is seeking an experienced SIEM Content Developer to research, develop, and enhance threat detection in a complex cybersecurity environment. You will create new detection use cases from emerging threats and threat intelligence, collaborating with security analysts and tool SMEs to improve monitoring and analytics.

The role focuses on custom scripts, SIEM content, and signatures tailored to critical systems, with the MITRE ATT&CK framework guiding

Qualifications

• Five (5) years of IT experience.
• Three (3) years with a SIEM in content development or incident response.
• Three (3) years of system and/or network administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Knowledge of Defense-in-Depth.
• Experience developing and maintaining scripts (PowerShell, Python or SPL).
• Current DoD Top Secret Clearance and eligibility for IT-I clearance.

Responsibilities

• Research and develop new threat detection use cases based on emerging threats and threat intel.
• Collaborate with stakeholders and tool SMEs to identify gaps in protection and analytics.
• Develop custom scripts to enhance SIEM functionality and automate monitoring.
• Review SIEM data feeds for quality and improve where needed.
• Analyze log sources to ensure relevant data is available for detection and investigation.
• Establish alerting priorities for critical systems and applications.
• Maintain detection signatures and alerts tailored to systems and programs.
• Support ongoing improvements of SIEM detection capabilities against evolving threats.
• Apply knowledge of network architecture, defense-in-depth, and MITRE ATT&CK in detection content.

Job description

DirectViz Solutions, LLC in Columbus, OH is seeking an experienced SIEM Content Developer to research, develop, and enhance threat detection in a complex cybersecurity environment. You will create new detection use cases from emerging threats and threat intelligence, collaborating with security analysts and tool SMEs to improve monitoring and analytics.

The role focuses on custom scripts, SIEM content, and signatures tailored to critical systems, with the MITRE ATT&CK framework guiding